Skill UI

This guide details how to use the official @linear/sdk to interact with the Linear project management API. It covers performing core CRUD operations, such as creating new issues, listing teams, querying issue states, and performing raw GraphQL requests. Ideal for developers needing to integrate Linear into a custom workflow, test API connectivity, or learn foundational automation patterns.

A comprehensive guide for installing and configuring the Linear SDK for TypeScript/JavaScript. It details two primary authentication methods: using a personal API key for scripts and server-side tools, and implementing the full OAuth 2.0 flow (including PKCE and token refreshing) for user-facing applications. Essential for integrating Linear functionality into custom software.

A comprehensive guide and implementation using TypeScript to establish production-grade observability for Linear API integrations. This includes defining Prometheus metrics (tracking latency, error rates, rate limits, and webhooks), implementing structured logging (using pino), and setting up robust health check endpoints. It ensures full visibility into API performance and system health, critical for mission-critical SaaS applications.

This comprehensive checklist provides best practices and patterns for deploying Linear integrations to a production environment. It covers critical areas including robust authentication and secure secret management, error handling and system resilience (rate limiting, timeouts), performance optimization (caching, batching), and setting up full observability (health checks, structured logging). Use this when preparing for a go-live or auditing existing deployments.

This guide provides advanced techniques for managing API rate limits (429 errors) and complexity budgets when interacting with the Linear API. It covers reading rate limit headers, implementing exponential backoff with jitter for robust retries, controlling request bursts via token buckets, and optimizing GraphQL queries to minimize complexity scores. Use this when developing reliable integrations that must adhere to strict API quotas.

This guide provides production-grade architectural patterns for integrating with the Linear API. It helps developers choose the optimal strategy—be it Simple SDK calls, Service-Oriented Gateways with caching, or Event-Driven Webhooks—based on system complexity, scale, and real-time requirements. Includes patterns like CQRS and rate limiting best practices.

A comprehensive guide covering advanced patterns for the Linear SDK using TypeScript/JavaScript. Learn how to implement efficient cursor-based pagination, avoid N+1 query problems by batch-loading relations, perform complex filtering, and handle API calls with type-safe error management when integrating with the Linear GraphQL API.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

This comprehensive guide outlines a multi-step process for safely upgrading the Linear SDK across major versions. It details how to check for breaking changes (like renamed fields or changed return types), implement compatibility layers using patterns like the Bridge pattern in TypeScript, run thorough unit and integration tests, and establish a robust deployment and rollback plan, ensuring zero downtime migration.

A comprehensive framework for setting up and processing Linear webhooks. This skill demonstrates best practices for real-time event handling, including mandatory HMAC signature verification, replay attack prevention, and robust event routing for various data types (Issues, Comments, Projects). Ideal for building reliable, real-time integrations between Linear and external systems.

This skill enforces mandatory code quality assurance by executing industry-standard validation tools before any code is considered complete or committed. It covers linting (style and syntax checking), type checking (for TypeScript and Python), and security auditing (e.g., npm audit, bandit). It ensures developers maintain a high standard of code reliability across diverse ecosystems like Node.js and Python.

A comprehensive guide for authorized security assessments, detailing systematic methods to escalate user privileges from low-level access to root control on Linux systems. Techniques covered include comprehensive system enumeration, exploiting kernel vulnerabilities (e.g., dirty pipe), abusing misconfigured sudo permissions (using gtfobins), and exploiting vulnerable SUID binaries.